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(54) Method for indicating enciphering of data transmission between a mobile communication 
network and a mobile station 



(57) The invention relates to a method for indicating 
enciphering of data transmission between a mobile 
communication network and a mobile station (MS) in the 
mobile communication network, wherein signals trans- 



ferred between a mobile communication network and a 
mobile station are monitored, and on the basis of the 
signal monitored, the cipher mode is indicated to the us- 
er of the mobile station. 
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Description 

The invention relates to a method and an apparatus 
for indicating enciphering of data transmission between 
a mobile communication network and a mobile station $ 
in the mobile communication network. 

In mobile networks, at least part of the data trans- 
mission is wireless communication using radio transmit- 
ters and receivers. The radio channel is a physically 
open resource available to anyone by means of suitable to 
communication equipment. This involves security risks, 
such as eavesdropping or disclosure of privacy of loca- 
tion. In digital mobile networks, such as GSM networks, 
digital data transmission is used which is difficult to 
eavesdrop. Further, it is possible to use identification of 
the caller and enciphering in data transmission. For pre- 
venting eavesdropping in digital mobile networks, enci- 
phering methods have been developed for enciphering 
the speech and data signals modified in digital form. 
Moreover, enciphering can be used in the transmission 
of other information via the radio channel, such as iden- 
tification data on the mobile station (International Mobile 
Subscriber Identity, I MSI) and on the location (Location 
Area Identification, LAI). In the receiver, the enciphered 
signal is decoded back to deciphered speech and data. 
A so-called encryption key and algorithm are advanta- 
geously known to the respective sending and receiving 
devices only, wherein given the effective encryption al- 
gorithms presently in use, decoding a coded signal to 
intelligible speech and data as well as into processing 
signals of the bit stream by force or illegally, i.e. without 
the correct encryption key and algorithm, is practically 
impossible. 

The most common digital mobile networks are cel- 
lular networks. The base station subsystem (BSS) of the 
mobile network comprises base transceiver stations 
(BTS) and base station controllers (BSC). The mobile 
station (MS) communicates via the radio channel with a 
base station close to the respective location of the mo- 
bile station. The base station communicates with the 
base station controller. Data transmission between the 
base station and the base station controller takes place 
usually via a cable. One base station controller controls 
over a group of several base stations. The base station 
controller, in turn, communicates with a mobile services 
switching centre (MSC). Several mobile services 
switching centres, in turn, can communicate with each 
other as well as with a landline communication network 
centre (PSTN, ISDN). The information to be transmitted 
is usually divided into Irames containing control infor- 
mation, speech and data converted into digital form, and 
error correction information. The frame structure can 
have several levels, wherein frames of a higher level are 
formed by arranging frames of a lower level. Encipher- 
ing can be used both with control information and with 
speech and data. Moreover, enciphering can be realized 
by using different encryption keys and algorithms at dif- 
ferent frame levels. An example of a digital data trans- 
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mission network is the GSM network, the standard of 
which contains definitions of the enciphering methods 
and algorithms to be used. 

In the GSM network, making a mobile-originated 
call is conducted in a way that a GSM mobile station and 
the GSM system network give signals, i.e. transmit con- 
trol and identification information required for making a 
call. In response to a request for a connection, the GSM 
mobile station is allotted a channel for signalling, if this 
is possible within the capacity of the GSM system net- 
work. On this channel, the GSM mobile station requests 
speech or data service from the GSM system network. 
On the side of the GSM system network, this request is 
transmitted to a mobile services switching centre 
(MSC), where the rights of the GSM subscriber are 
checked from a visitor location register (VLR). 

Upon a mobile-terminated call e.g. from a subscrip- 
tion of a landline telephone network, the operator of the 
telephone network transmits e.g. the number of the re- 
ceiving telephone to the mobile services switching cen- 
tre. The mobile services switching centre finds out the 
rights of the GSM subscriber from the home location 
register (HLR) and from the visitor location register 
(VLR). After this, the GSM system network and the GSM 
mobile station transmit the control and identification in- 
formation required for making a call. 

Depending on the implementation and the configu- 
ration of the parameters, the visitor location register VLR 
can make a request via the mobile services switching 
centre to the GSM mobile station for exchange of iden- 
tification information and start of enciphering. This re- 
quest is made in a so-called cipher mode command 
message. It is, however, possible to make a call also 
without exchange of identification information and enci- 
phering. In other words, the call is either enciphered or 
not enciphered depending on the network parameters 
set by the GSM system network operator. 

In most common mobile communication networks 
currently available, however, enciphering is not optional 
to a user of the mobile communication network but usu- 
ally an alternative function offered by the operator of the 
mobile network, wherein when current wireless data 
transmission equipment is used, the user has no cer- 
tainty whether the data transmission is enciphered or 
not. Particularly when the mobile station is moving, the 
mobile station can be transferred from the area ol one 
base station system to the area of another base station 
system, wherein the cipher mode of data transmission 
can be changed. 

One purpose of the present invention is to eliminate 
the disadvantages described above and to provide a 
method for indicating enciphering of data transmission 
to the user of the mobile communication network. The 
invention is based on the idea that control signals used 
in data transmission between a mobile network and a 
mobile station are monitored and when a control signal 
for enciphering is detected, the cipher mode is signalled 
with a cipher mode indicator connected to the mobile 
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station. The method of the invention is characterized in 
that signals transferred between a mobile communica- 
tion network and a mobile station are monitored, and on 
the basis o1 the signal monitored, the cipher mode is in- 
dicated to the user of the mobile station. 

The apparatus according to the invention is charac- 
terized in that the apparatus comprises means for mon- 
itoring signals transferred between a mobile communi- 
cation network and a mobile station, and means for in- 
dicating the cipher mode to the user of the mobile sta- 
tion. 

The invention gives significant advantages. Using 
the method of the invention, the user of a data transmis- 
sion device is always aware of whether the data trans- 
mission is enciphered or not. Further, by using the meth- 
od of the invention, it is possible to indicate a possible 
change in the cipher mode during the data transmission 
to the user of the data transmission device. 

In the following, the invention will be described in 
more detail with reference to the appended drawings. In 
the drawings, 
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Fig. 1a shows the call set-up signals during a mo- 
bile-originated call in the GSM mobile com- 
munication network, 

Fig. lb shows the call set-up signals during a mo- 
bile-terminated call in the GSM mobile com- 
munication network, 

Fig. 2 is a reduced signal chart on detection of the 
cipher mode by the principle of interrupting, 

Fig. 3 is a reduced signal chart on an enquiry about 
the cipher mode, 

Fig. 4 is a reduced signal chart on detection ol the 
cipher mode when enquiries at regular inter- 
vals are used, 

Fig. 5 is a reduced block diagram showing the lo- 
cation of the most essential blocks of a ci- 
pher mode indicating device in a mobile sta- 
tion according to an advantageous embodi- 
ment of the invention, 

Fig. 6 is a reduced block diagram showing the im- 
plementation ol a cipher mode indicating de- 
vice in connection with a mobile station and 
a data processor, 

Fig. 7 is a reduced chart on a situation where a da- 
ta transmission connection is formed be- 
tween two mobile stations, and 

Fig. 8 is a reduced signal chart on an enquiry about 
the cipher mode in a situation where a data 
transmission connection is formed between 
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two mobile stations. 

Figure 1a shows call set-up signalling during a mo- 
bile-originated call and Fig. 1 b shows call set-up signals 
during a mobile-terminated call in the GSM mobile com- 
munication network. During call set-up signalling, enci- 
phering information is exchanged if the cipher mode is 
set on. Upon call set-up signalling, the mobile commu- 
nication network sends a cipher mode command mes- 
sage requesting the mobile station MS to start encipher- 
ing. When the mobile station MS receives this message, 
it sets a cipher indication data field CIND to show that 
the cipher mode is on. The cipher indication data field 
CIND used can be e.g. a predetermined binary digit. 
Thus the value of the binary digit can be either a logical 
"0" or a logical "1". For example in logical circuits having 
an operating voltage of 3 V, the logical "0 W value corre- 
sponds advantageously to a voltage value of approxi- 
mately 0V and the logical "1" value corresponds to a 
voltage of approximately 3 V, which is known as such. 
The cipher indication data field CIND used can be nat- 
urally any other data field as well, such as a byte, where- 
in advantageously when the value of the byte is zero, 
the cipher mode is off and, in a corresponding manner, 
when the value of the byte of different from zero, the 
cipher mode is on. The contents of the cipher indication 
data field CIND is cleared upon starting up the mobile 
station MS and always after a call has been ended. 
When the user starts a new call and the call set-up sig- 
nalling advances, the value of the cipher indication data 
field CIND is changed in connection with the exchange 
of ciphering information to be different from zero, i.e. to 
indicate that the cipher mode is on. 

Now referring to Fig. 2, when the resource control 
block 1 of the mobile station MS detects a cipher control 
signal in the communication between the mobile station 
and the base station, the resource control block sets the 
value of the cipher indication data field CIND in a cipher 
indicator memory block 2 to correspond with the cipher 
indication data. The cipher indicator memory block 2 
reads the value of the cipher indication data field and 
detects that a new value has been set in it, wherein the 
cipher indicator memory block 2 makes a request for in- 
terruption. A user interface block 3 detects the request 
for interruption, wherein it sends an enquiry on the ci- 
pher mode to the cipher indicator memory block 2 which 
returns the data on the cipher mode to the user interface 
block 3. Following this, the user interface block 3 sets 
the cipher indicator to the mode corresponding to the 
ciphering data, for example with a certain sign on the 
display of the mobile station. The change ol the cipher 
mode can also be indicated with an acoustic signal, 
wherein the user notices the change in the cipher mode 
also when talking to a mobile station. Thus the user does 
not need to have visual contact with the display of the 
mobile station. The user of the mobile station is informed 
of the cipher mode at the beginning of and during the 
call. This is important particularly in situations where the 
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cipher mode can be changed during the call, for exam- 
ple when the mobile station is moving. 

Figure 3 illustrates a second advantageous embod- 
iment of the method according to the invention. Here the 
difference to the embodiment of Fig. 2 lies primarily in 
that a change in the cipher indication data field does not 
lead to a request for interruption but the cipher indicator 
memory block 2 sends the cipher information to the user 
interface block 3 whenever the value in the cipher indi- 
cator memory block is changed. In other respects, the 
operation of the embodiment shown in Fig. 3 corre- 
sponds substantially to the operation of the embodiment 
shown in Fig. 2. 

Figure 4 illustrates a third advantageous embodi- 
ment of the method according to the invention, wherein 
the user interface block 3 sends cipher mode enquiry 
messages at regular intervals to the cipher indicator 
memory block 2. The cipher indicator memory block 2 
sends a response to the enquiry to the user interface 
block 3 which will transmit the cipher information to the 
cipher indicator. In this embodiment, a separate mes- 
sage on the change in the cipher indication data field is 
not formed. When using this embodiment, the interval 
of sending enquiry messages must be kept sufficiently 
short in order to detect a change in the cipher mode suf- 
ficiently quickly. In this embodiment, it is advantageous 
to form a cipher mode enquiry message at least in those 
situations when the mobile station moves from the area 
of one base station system to the area of another base 
station system. 

During a call, it is possible to transmit so-called 
short message services (SMS) to the mobile station. In 
the transmission of short messages, the cipher mode 
may deviate from the cipher mode of the call in question, 
wherein the method of the invention can be used to in- 
dicate the cipher mode separately for the call and for the 
short message services, Also a change in the cipher 
mode can be indicated to the user both for the call and 
for the short message services. For indicating the cipher 
mode and a change in the cipher mode, signals distin- 
guishable from each other can be used, e.g. different 
acoustic signals, wherein the user of the mobile station 
is aware of the cipher mode of both the call and the short 
message services. 

The method according to the present invention can 
also be applied in a way that the existence of encipher- 
ing is indicated to the user already before starting the 
call. This can be implemented advantageously by pro- 
viding the menu structure of the mobile station with a 
function whereby the user can ask the mobile commu- 
nication network about the cipher mode. When this func- 
tion is selected from the menu, the mobile station sends 
the mobile network a message inquiring the cipher 
mode. In practice, this can be conducted in the GSM 
mobile network by forcing the mobile station to a location 
update procedure. This procedure contains starting of 
enciphering if the cipher mode is active in the mobile 
communication network. In this way, the mobile station 



6 

can send to the mobile communication network an en- 
quiry about the current cipher mode, which is indicated 
to the user e.g. by an icon in the display of the mobile 
station. 

s Problems may result in countries where encipher- 

ing is not allowed to be on during speech because of 
legislation or for another reason. However, enciphering 
can thus be on for signalling, i.e. the location update pro- 
cedure shows cipher-on mode although it is not on for 

to speech. Thus the mobile station can produce an acous- 
tic signal when it turns on the speech channel and de- 
tects a change in the cipher mode, wherein the user will 
be informed that speech is not transferred in enciphered 
form. 

is Figure 5 is a reduced block diagram showing one 
embodiment of the apparatus according to the inven- 
tion. A functional part of the central processing unit MCU 
consists of the resource control block 1 which processes 
signalling between the mobile communication network 

20 and the mobile station. The resource control block 1 is 
in a transmission connection via a first signal bus 4 to a 
data transmission bus 5. The data transmission bus 5 
is connected with a memory block MEM by means of a 
second signal bus 6. Further, the data transmission bus 

2S 5 is connected with a user interface block Ul via a third 
signal bus 7. The user interface block Ul includes a vis- 
ual display unit 8, a display unit control means 9, an 
acoustic signal forming element 1 0, and a control means 
11 for the acoustic signal forming element. The display 

30 unit B is preferably the display of the mobile station, and 
the acoustic signal forming element 10 is preferably the 
sound generator of the mobile station, or the like. 

Data transmission from the resource control block 

I to the cipher indication data field CIND is preferably 
35 controlled by the central processing unit MCU, wherein 

the central processing unit MCU reads the ciphering in- 
formation and transmits it to the cipher indication data 
field CIND via the first signal bus 4, the transmission bus 
5 and the second signal bus 6. Said buses can advan- 

40 tageously be arranged by known solutions used in con- 
nection with microcontrollers. Said signal buses can al- 
so be placed in the microcontroller itself, wherein the 
microcontroller comprises a central processing unit 
MCU, a resource control block 1, a cipher indicator 

45 memory block 2 comprising also the cipher indication 
data field CIND, as well as said signal buses 4, 6 and 
data transmission bus 5. 

The central processing unit MCU has a data trans- 
mission connection also to the user interface block Ul 

so via the first signal bus 4, the data transmission bus 5 
and the third signal bus 7. Consequently, the central 
processing unit MCU can advantageously control also 
the display unit control means 9 and the control means 

II for the acoustic signal forming element situated in the 
55 user interface block Ul. This control can be arranged in 

a way that the central processing unit MCU sets the con- 
trol line of the display unit control means 9 (not shown) 
to a logical W 0 M value (ca. 0V) when the cipher mode is 
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off. The central processing unit MCU sets the control 
line of the display unit control means 9 to a logical "1 B 
value (for example ca. 3 V) when the cipher mode is on. 
Acoustic signal formation can be applied in a corre- 
sponding manner. Thus the central processing unit 
^MCU sets the control line of the control means 11 tor the 
acoustic signal forming element (not shown) to a logical 
"0" value, when there are no changes in the cipher 
mode. When the cipher mode is changed, the central 
processing unit MCU sets said control line for a moment 
to a logical "1" value and resets said control line to an 
"0" value after a suitable length of time. Thus the length 
of the acoustic signal can be influenced by the duration 
of the "rvalue state. 

Data transmission between different blocks in the 
apparatus according to the invention can be arranged 
using methods known as such, wherein it is unneces- 
sary to explain it in more detail in this context. 

The method of the present invention can be advan- 
tageously applied also in mobile stations currently in use 
in a way that the functions required in the method are 
provided in the operational software of the mobile sta- 
tion. Thus no changes will be required in the hardware 
of the mobile station. 

The invention can also be applied in a way that part 
of the functions required in the method are provided in 
the operational software of the mobile station and part 
of them are provided in the software of a data processor 
which is in transmission connection with the mobile sta- 
tion. One such embodiment is illustrated as a reduced 
block diagram in Fig. 6. 

In this embodiment, the mobile station is also used 
as a so-called wireless modem in connection with a data 
processor, such as a personal computer, wherein a data 
transmission connection is formed from the data proc- 
essor PC via the mobile communication network e.g. to 
another data processor. In this case, it is advantageous 
to indicate the cipher mode as a certain sign on the dis- 
play 12 of the data processor and possibly also as an 
acoustic signal by the acoustic signal forming element 

1 3 of the data processor. The cipher indicator memory 
block 2 transmits information on a change in the cipher 
indication data field advantageously to the data proces- 
sor PC by means of a mobile station connection element 

14 and a PC connection bus 15. The data processor PC 
is provided with application software which controls that 
the data on the change in the cipher indication data field 
is read in the data processor PC from a data processor 
connection element 16 and processed preferably in the 
central processing unit 17 of the data processor. After 
this the data processor PC sends out a cipher mode en- 
quiry message which is transmitted back to the cipher 
indicator memory block by means of the data processor 
connection element 16, the PC connection bus 15 and 
the mobile station connection element 14. In response 
to the enquiry message, the cipher indicator memory 
block 2 sends the cipher data to the data processor PC. 
From the data processor PC, the cipher data is read 
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from the data processor connection element 16 and 
transmitted to the cipher mode indicator. The cipher 
mode indicator is preferably the display unit 1 2 and pos- 
sibly also the acoustic signal forming element 1 3 of the 

5 data processor. Thus the cipher mode is indicated by a 
suitable symbol on the display unit 12 of the data proc- 
essor. In a corresponding way, a change in the cipher 
mode is indicated, e.g. as an acoustic signal by the 
acoustic signal forming element 13 of the data proces- 

io son Also the operation and structure of the data proc- 
essor PC are generally known and need not be ex- 
plained in more detail in this context. 

Further, the invention can be applied in situations 
where a data transmission connection (call) is formed 

15 between two mobile stations. Thus data transmission 
between the first mobile station MS1 and a mobile com- 
munication network as well as between the second mo- 
bile station MS2 and a mobile communication network 
takes place via the radio channel. The mobile stations 

20 MS1 , MS2 can be located in areas of different base sta- 
tions, wherein it is possible that the cipher mode in com- 
munication between the first mobile station MS1 and the 
mobile network is different than in communication be- 
tween the second mobile station MS2 and the mobile 

25 network. The data transmission connection between the 
first mobile station MSI and the second mobile station 
MS2 is formed in a way known as such. After the con- 
nection has been made, it is possible e.g. for the first 
mobile station MS1 to enquire the cipher mode of the 

30 second mobile station MS2 (Fig. 8). The enquiry can be 
made for example as call control signalling, such as in 
the GSM mobile network, and also if the ISDN between 
the mobile services switching centres MSC is in the us- 
er-user information element according to the GSM 

35 Standard 04.08. The resources control block 1 of the 
first mobile station MSI lorms a cipher mode enquiry 
message and transmits it to the second mobile station. 
The resource control block 18 of the second mobile sta- 
tion detects the cipher mode of the second mobile sta- 

40 tion and forms a response message where the cipher 
mode is transmitted to the resource control block 1 of 
the first mobile station. After this, the resource control 
block 1 of the first mobile station MS1 sets the cipher 
indication data field as disclosed above in this descrip- 

45 tion. The first mobile station MSI can also be provided 
with a second cipher indication data field for recording 
cipher data between the second mobile station MS2 and 
the mobile communication network. Thus the user of the 
mobile station MS1 , MS2 can be given the cipher mode 

50 separately for communication between the first mobile 
station MS1 and the mobile network and for communi- 
cation between the second mobile station MS2 and the 
mobile network. In another alternative, the user of the 
mobile station MSI, MS2 is given the cipher mode so 

55 that if communication between both mobile stations 
MS1, MS2 and the mobile network is enciphered, the 
user of the mobile station MS1 , MS2 is informed that the 
cipher mode is on. In a different case the user is in- 
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formed that the cipher mode is off. 

If the cipher mode in the second mobile station MS2 
is changed during a call, it sends a message on the 
change in the cipher mode by user-user signalling. 

For enquiring the cipher mode of communication [to 
and from] the second mobile station MS2, also other 
methods can be used, such as short message services 
(SMS). 

The ISDN telecommunication network (Integrated 
Services Digital Network) provides also an optional us- 
er-to-user signalling service (UUS) which makes com- 
munication possible between telecommunication termi- 
nals in a data transmission connection with each other. 
Thus, if a data transmission connection is made from a 
mobile station MS to a telecommunication terminal of 
the ISDN type, the mobile station MS can send the tel- 
ecommunication terminal an enquiry about the cipher 
mode by using the user-to-user signalling service. It the 
telecommunication terminal does not recognize the en- 
quiry message of the mobile station MS, the mobile sta- 
tion MS will not receive a response to the enquiry, or the 
response will consist of an unidentified command or an- 
other corresponding message. In such a case, the mo- 
bile station MS can deduce that the telecommunication 
terminal is not a mobile station but most probably a tel- 
ecommunication terminal connected with a landline tel- 
ecommunication network. In this situation, the display 
unit of the mobile station MS indicates the user of the 
mobile station for example that the cipher mode be- 
tween the second telecommunication terminal and the 
telecommunication network is unknown. 

For indicating the cipher mode and a change in the 
cipher mode to the user of the mobile station MS, also 
other methods, known as such, can be used. For exam- 
ple, the cipher mode can be indicated by a light source, 
such as a light-emitting diode (LED). Consequently, for 
example when the cipher mode is on, a control voltage 
is supplied to the LED (the LED is emitting) and when 
the communication is not enciphered, no control voltage 
is supplied to the LED (the LED is unlit). A change in the 
cipher mode can be advantageously indicated by flash- 
ing the LED. Thus for example when the communication 
is not enciphered, the LED is unlit, and when the com- 
munication becomes enciphered, the LED flashes for a 
moment after which the LED will emit light continuously 
as long as the cipher mode is on. In a corresponding 
manner, when the communication becomes unenci- 
phered, the LED will flash for a moment before it is 
turned off. 

Further, so-called vibration batteries have been de- 
veloped for mobile stations whereby the mobile station 
can be made to vibrate in a muffled way. Thus the cipher 
mode ol data transmission can be indicated also by a 
vibration battery, wherein for example upon a change in 
the cipher mode, a control signal is supplied to the vi- 
bration battery for a moment, which will result in vibra- 
tion of the mobile station and detection of the change in 
the cipher mode by the user of the mobile station. 



The invention is not limited only to the embodiments 
presented above, but it can be modified within the scope 
of the appended claims. 



1. A method for indicating enciphering of data trans- 
mission between a mobile communication network 

io and a mobile station (MS) in the mobile communi- 
cation network, characterized in that 

signals transferred between a mobile commu- 
nication network and a mobile station are mon- 
is itored, and 

on the basis of the signal monitored, the cipher 
mode is indicated to the user of the mobile sta- 
tion. 

20 

2. A method according to claim 1 , characterized in 
that in addition to indicating the cipher mode, a 
change in the cipher mode is indicated to the user 
of the mobile station. 

25 

3. A method according to claim 1 or 2, characterized 
in that the data transmission connection between 
the mobile communication network and the mobile 
station (MS) is a radio connection. 

30 

4. A method according to any of the claims 1 to 3, 
characterized in that the communication network 
is a digital communication network, such as a GSM 
network. 

35 

5. A method according to any of the claims 1 to 4, 
wherein the mobile station (MS) comprises a dis- 
play unit (8) and an acoustic signal forming element 
(10), known as such, characterized in that the ci- 

40 pher mode is indicated with the display unit (8) and 
a change in the cipher mode is indicated with the 
acoustic signal forming element (10). 

6. A method according to any of the claims 1 to 4, 
45 wherein the mobile station (MS) comprises a light 

source (LED), known as such, characterized in 
that the cipher mode is indicated with the light 
source (LED). 

so 7. A method according to claim 6, characterized in 
that a change in the cipher mode is indicated with 
a flashing light. 

8. A method according to any of the claims 1 to 4, 
55 characterized in that the cipher mode is indicated 

by vibration. 

9. A method according to any of the preceding claims, 
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characterized in that the signal to be monitored is 
a control signal. 

10. A method according to any of the preceding claims, 
wherein a first mobile station (MS1) and a second 
mobile station (MS2) are in a data transmission con- 
nection with each other through at least one mobile 
communication network, characterized in that the 
cipher mode between the mobile communication 
network and the first mobile station (MS1) is indi- 
cated to the user of the second mobile station 
(MS2). 

11. A method according to any of the preceding claims, 
wherein the mobile station is used in connection 
with a data processor (PC) for data transmission be- 
tween a mobile communication network and the da- 
ta processor (PC), characterized in that the cipher 
mode is indicated on the display unit (12) of the data 
processor and a change in the cipher mode is indi- 
cated with the acoustic signal forming element (10) 
of the data processor. 

12. An apparatus for indicating enciphering of data 
transmission between a mobile station (MS) and a 
mobile communication network in the mobile com- 
munication network, characterized in that the ap- 
paratus comprises: 

means (1) for monitoring signals transferred 
between a mobile communication network and 
a mobile station (MS) and 
means (8, 12) for indicating the cipher mode to 
the user of the mobile station. 

1 3. An apparatus according to claim 1 2, characterized 
in that the apparatus comprises further means (10, 
13) for indicating a change in the cipher mode. 

14. An apparatus according to claim 12 or 13, charac- 
terized in that the means (8, 12) for indicating the 
cipher mode comprise a display unit (8) of the mo- 
bile station, and the means (1 0, 1 3) for indicating a 
change in the cipher mode comprise an acoustic 
signal forming element (10), such as a sound gen- 
erator or the like. 



16, characterized in that it is provided in a mobile 
station (MS). 

18. An apparatus according to claim 12 or 13, charac- 
5 terized in that the means (8, 12) for indicating the 

cipher mode and the means (10, 13) for indicating 
a change in the cipher mode are provided in a data 
processor (PC) communicating with a mobile sta- 
tion (MS). 

10 
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15. An apparatus according to any of the claims 12 to 

14, characterized in that the means (10, 13) for in- 
dicating a change in the cipher mode comprise a so 
light source (LED), known as such. 

16. An apparatus according to any of the claims 12 to 

15, characterized in that the means (10, 1 3) for in- 
dicating a change in the cipher mode comprise 55 
means for generating vibration. 

17. An apparatus according to any of the claims 12 to 
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